Herramientas de código abierto

pupy

Herramientas

• [5265 estrellas][1m] [Py] n1nj4sec/pupy RAT y herramienta de post-explotación multiplataforma (Windows, Linux, OSX, Android) escrita en Python

Artículos

• 2020.01 [TheCyberWire] PupyRAT ha vuelto. También lo ha hecho el grupo Konni. Tormenta en Twitter por acusaciones de que MBS hackeó a Jeff Bezos...
• 2019.03 [hackingarticles] Herramienta de Comando y Control: Pupy
• 2017.11 [chokepoint] Pupy como payload de Metasploit
• 2017.10 [boredhackerblog] Shell de Pupy sobre Tor
• 2017.02 [n0where] RAT multiplataforma de código abierto: Pupy
• 2015.10 [hackingarticles] Hackea un PC remoto usando Pupy – Herramienta de administración remota

Covenant

Herramientas

• [1147 estrellas][6d] [C#] cobbr/covenant Covenant es un framework C2 colaborativo .NET para equipos rojos.
• [95 estrellas][9d] [C#] cobbr/elite Elite es el componente del lado cliente del proyecto Covenant. Covenant es un framework de comando y control .NET que busca resaltar la superficie de ataque de .NET, facilitar el uso de técnicas ofensivas en .NET y servir como plataforma colaborativa de comando y control para equipos rojos.
• [31 estrellas][4m] [C#] cobbr/c2bridge C2Bridges permite a los desarrolladores crear nuevos protocolos de comunicación personalizados y utilizarlos rápidamente dentro de Covenant.

Artículos

• 2020.01 [csis] Incrustar DLLs externas en tareas de Covenant
• 2020.01 [hakin9] Covenant, el C2 basado en .NET en Kali Linux | por Dan Dieterle
• 2019.12 [cyberarms] Covenant, el C2 basado en .NET en Kali Linux
• 2019.12 [rastamouse] Tareas de Covenant 101
• 2019.12 [rsa] Usando RSA NetWitness para detectar C&C: Covenant
• 2019.11 [4hou] Análisis del uso de Covenant
• 2019.11 [3gstudent] Análisis del uso de Covenant
• 2019.10 [cobbr] Covenant: Desarrollo de protocolos de comunicación C2 personalizados
• 2019.10 [specterops] Covenant: Desarrollo de protocolos de comunicación C2 personalizados
• 2019.09 [freebuf] Covenant: Un framework .NET de comando y control diseñado para equipos rojos
• 2019.09 [stealthbits] Configuración, instalación y ejecución de tareas con Covenant: La guía completa
• 2019.08 [stealthbits] Frameworks C2 de código abierto de nueva generación en un mundo post-PSEmpire: Covenant
• 2019.08 [rastamouse] Covenant, Donut, TikiTorch
• 2019.08 [cobbr] Covenant: La actualización de usabilidad
• 2019.08 [specterops] Covenant: La actualización de usabilidad
• 2019.02 [cobbr] Entrando en un Covenant: Comando y control .NET
• 2019.02 [rvrsh3ll] Entrando en un Covenant: Comando y control .NET
• 2019.01 [specterops] Entrando en un Covenant: Comando y control .NET

Slackor

Herramientas

• [332 estrellas][12d] [Py] coalfire-research/slackor Un implante en Golang que usa Slack como servidor de comando y control

Artículos

• 2019.09 [freebuf] Slackor: Un servidor C&C escrito en Go
• 2019.08 [freebuf] Slackor: Cómo usar Slack como tu servidor de comando y control
• 2019.06 [n00py] Presentando Slackor, una herramienta de acceso remoto que usa Slack como canal C2

QuasarRAT

Herramientas

• [2932 estrellas][10m] [C#] quasar/quasarrat Herramienta de administración remota para Windows

Artículos

• 2019.10 [UltraHacks] QuasarRAT [Descarga gratuita] | [VIDEO TUTORIAL] | Ultra Hacks
• 2018.09 [malwarebytes] Implementación defectuosa de la vulnerabilidad CVE-2018-8373 utilizada para distribuir Quasar RAT
• 2018.03 [4hou] Análisis en profundidad de un documento RTF malicioso que utiliza macros para propagar NetwiredRC y Quasar RAT
• 2018.01 [paloaltonetworks] VERMIN: Quasar RAT y malware personalizado utilizados en ataques contra Ucrania
• 2017.12 [HackerSploit] QuasarRAT - ¿El mejor RAT para Windows? - Herramienta de administración remota para Windows
• 2017.11 [n0where] Herramienta de administración remota gratuita y de código abierto para Windows: QuasarRAT
• 2017.10 [TechnoHacker] Reseña de Quasar RAT
• 2017.10 [rsa] Spam malicioso distribuye el RAT/spyware Quasar el 27-09-2017
• 2017.01 [paloaltonetworks] Downeks y Quasar RAT utilizados en recientes ataques dirigidos contra gobiernos

EvilOSX

Herramientas

• [1376 estrellas][2y] [Py] marten4n6/evilosx Un RAT malicioso (herramienta de administración remota) para macOS / OS X.

Artículos

• 2019.07 [hackingarticles] EvilOSX-RAT para MacOS/OSX
• 2019.06 [NullByte] Toma el control de computadoras MacOS con EvilOSX [Tutorial]
• 2018.08 [freebuf] EvilOSX: Una potente herramienta de administración remota (RAT) para macOS
• 2018.07 [pentesttoolz] EvilOSX – Herramienta de administración remota maliciosa (RAT) para macOS/OS X – Kali Linux 2018.2
• 2018.06 [n0where] RAT de post-explotación puramente Python para macOS & OSX: EvilOSX
• 2018.03 [applehelpwriter] Defendiéndose de EvilOSX, un RAT en Python con un giro en su cola
• 2018.03 [binarydefense] EvilOSX - Binary Defense
• 2018.03 [binarydefense] EvilOSX
• 2017.11 [NullByte] EvilOSX RAT - Cómo construir un payload e iniciar un servidor

Merlin

Herramientas

• [2568 estrellas][6m] [Go] ne0nd0g/merlin Merlin es un servidor y agente C2 HTTP/2 de post-explotación multiplataforma escrito en Golang.

Artículos

• 2019.03 [hackingarticles] Guía de comando y control para Merlin
• 2018.02 [lockboxx] Merlin para equipos rojos
• 2017.12 [n0where] Servidor C2 HTTP/2 de post-explotación multiplataforma: Merlin

Software comercial

Team Viewer

Herramientas

• [405 estrellas][2y] [C++] vah13/extracttvpasswords Herramienta para extraer contraseñas de la memoria de TeamViewer usando Frida
• [277 estrellas][2y] [C++] gellin/teamviewer_permissions_hook_v1 Una prueba de concepto de DLL inyectable en C++, que utiliza hooking inline desnudo y modificación directa de memoria para cambiar los permisos de TeamViewer.
• [175 estrellas][9d] uknowsec/sharpdecryptpwd Analiza contraseñas guardadas en sistemas Windows para varios programas, incluyendo: Navicat, TeamViewer, FileZilla, WinSCP, productos de la serie Xmangager (Xshell, Xftp).
• [59 estrellas][2y] [Py] attackercan/teamviewer-dumper Volcado del ID y contraseña de TeamViewer desde la memoria
• [42 estrellas][6d] [C#] v1v1/decryptteamviewer Enumerar y descifrar credenciales de TeamViewer desde el registro de Windows
• [36 estrellas][5y] [C++] kkar/teamviewer-dumper-in-cpp Vuelca el ID, contraseña y configuración de cuenta de TeamViewer desde una instancia en ejecución enumerando ventanas secundarias.
• [25 estrellas][5m] [C++] dydtjr1128/remoteassistance-cpp [WIP] Asistencia remota como TeamViewer (C++)

Artículos- 2020.02 [yoroi] Importante Vulnerabilità su TeamViewer

• 2020.01 [freebuf] Software de monitoreo “original” explotado por la industria negra, ¿podría la falta de control de calidad convertirlo en otro TeamViewer?
• 2019.11 [sessionstack] TeamViewer, and Alternative Remote Access and Web Conferencing Solutions, Through the Lens of Customer Service
• 2019.10 [threatbook] “¿El hackeo de TeamViewer” es real o exagerado? ¡No se asuste! Un artículo para entender el método de respuesta
• 2019.10 [freebuf] Análisis y conclusiones sobre el supuesto incidente de “intrusión” en TeamViewer
• 2019.04 [4hou] Campaña de ataques a agencias gubernamentales de varios países utilizando una versión troyanizada de TeamViewer
• 2019.04 [0x00sec] Port 5900 open on a MAC that used Teamviewer, trying to access it
• 2018.09 [blackmoreops] Install TeamViewer on Kali Linux 2018
• 2018.08 [freebuf] La versión crackeada de TeamViewer 13 que descargaste podría ser venenosa
• 2018.08 [4hou] Uso de RMS y TeamViewer para atacar empresas industriales
• 2018.08 [kaspersky] Attacks on industrial enterprises using RMS and TeamViewer
• 2018.08 [securelist] Attacks on industrial enterprises using RMS and TeamViewer
• 2017.12 [4hou] Prueba de vulnerabilidad de permisos en TeamViewer 13.0.5058
• 2017.12 [3gstudent] Prueba de vulnerabilidad de permisos en TeamViewer 13.0.5058
• 2017.12 [3gstudent] Prueba de vulnerabilidad de permisos en TeamViewer 13.0.5058
• 2017.12 [malwarebytes] Use TeamViewer? Fix this dangerous permissions bug with an update
• 2017.11 [360] Análisis de un troyano de control remoto basado en TeamViewer dirigido a pequeñas empresas
• 2017.08 [freebuf] Extracción de contraseñas de la memoria de TeamViewer usando Frida
• 2017.04 [4hou] Comprensión profunda de cómo el malware puede abusar de TeamViewer
• 2017.02 [4hou] TeamSpy ha vuelto, TeamViewer se convierte en su vector de ataque
• 2016.12 [trendmicro] New SmsSecurity Variant Roots Phones, Abuses Accessibility Features and TeamViewer
• 2016.10 [broadanalysis] Rig Exploit Kit via EITEST delivers malicious payload and TeamViewer Remote Control
• 2016.06 [trendmicro] Unsupported TeamViewer Versions Exploited For Backdoors, Keylogging
• 2016.06 [] El control remoto más utilizado - TeamViewer ha sido hackeado
• 2016.06 [radware] Has TeamViewer Been Hacked?
• 2016.06 [fortinet] Threat Landscape Perspectives: TeamViewer Attack – Spy vs. Spy Misdirection?
• 2016.03 [privacy] Surprise, Hackers Use TeamViewer to Spread Ransomware
• 2015.08 [volatility] Recovering TeamViewer (and other) Credentials from RAM with EditBox
• 2015.06 [] Obtención de cuenta y contraseña de TeamViewer en ejecución
• 2014.05 [trendmicro] Remote Help for Family and Friends – Part 1: Installing and Using TeamViewer
• 2014.02 [webroot] Managed TeamViewer based anti-forensics capable virtual machines offered as a service
• 2014.01 [robert] Howto install Teamviewer 9.x on Ubuntu >= 12.04 64bit (in my case 13.10)
• 2013.05 [security] Installing Teamviewer 8 on Kali 64bit (Debian)
• 2013.03 [securelist] The TeamSpy Crew Attacks – Abusing TeamViewer for Cyberespionage

Malware (parte)

Gh0st

Herramientas

• [301estrellas][7d] [C++] yuanyuanxiang/simpleremoter Control remoto basado en gh0st: implementa gestión de terminales, gestión de procesos, gestión de ventanas, escritorio remoto, gestión de archivos, gestión de voz, gestión de video, gestión de servicios, gestión del registro, etc.
• [273estrellas][7y] [C++] sin5678/gh0st a open source remote administrator tool
• [91estrellas][6y] [C++] igh0st/gh0st3.6_src
• [90estrellas][1m] [C++] zibility/remote Software de asistencia remota para PC desarrollado con referencia al código fuente de Gh0st, con funciones como shell remoto, gestión de archivos, gestión de escritorio y envío de mensajes.
• [21estrellas][5m] [C++] holmesian/gh0st-light Versión simplificada de una vieja herramienta

Artículos

• 2020.01 [z3roTrust] Becoming Untraceable - 12.0_Gh0st_Us3r.dll
• 2020.01 [rsa] Detecting Gh0st RAT in the RSA NetWitness Platform
• 2019.06 [binarydefense] Gh0stCringe (Formerly CirenegRAT) - Binary Defense
• 2019.03 [alienvault] The odd case of a Gh0stRAT variant
• 2018.11 [trendmicro] Uso de aprendizaje automático para clasificar flujos de red maliciosos de variantes de Gh0st RAT
• 2018.08 [traffic] [2018-08-12] KaiXinEK->Gh0stRAT
• 2018.07 [traffic] [2018-07-16] KaiXinEK->Gh0stRAT
• 2018.07 [inquest] Field Notes: Malicious HFS Instances Serving Gh0stRAT
• 2018.07 [360] Análisis inicial de una muestra del troyano de control remoto Gh0st RAT
• 2018.05 [id] CryptGh0st
• 2018.05 [freebuf] Decodificación de datos de red en variantes de Gh0st RAT
• 2018.04 [freebuf] Análisis del protocolo de comunicación de la familia Gh0st y DahuiLang RAT
• 2018.04 [360] Análisis del protocolo de comunicación de la familia Gh0st/DahuiLang RAT
• 2017.12 [traffic] [2017-12-06] KaiXinEK->Gh0stRAT
• 2016.06 [cysinfo] Hunting and Decrypting Communications of Gh0st RAT in Memory
• 2014.05 [pediy] [Original] Análisis del error de conexión de Gh0st 3.6 en Windows 7
• 2014.04 [pediy] [Discusión] Error de IOCP en Gh0st 3.6
• 2014.03 [trendmicro] Kunming Attack Leads to Gh0st RAT Variant
• 2013.08 [pediy] Gh0st secundario
• 2013.06 [trendmicro] Targeted Attack in Taiwan Uses Infamous Gh0st RAT
• 2012.11 [trendmicro] DaRK DDoSseR Leads to Gh0st RAT
• 2012.06 [alienvault] New MaControl variant targeting Uyghur users, the Windows version using Gh0st RAT
• 2012.05 [forcepoint] The Amnesty International UK website was compromised to serve Gh0st RAT [Update]

NanoCore

Herramientas

• [2estrellas][10m] [Py] jacobpimental/nanocore_extractor Extracts nanocore sample from compile AutoIT script

Artículos

• 2020.01 [molly] NanoCore: The RAT that keeps on keeping on. How to detect and prove an infection.
• 2019.11 [4hou] Archivo ZIP con doble carga propagando NanoCore RAT
• 2019.10 [morphisec] NanoCore RAT Under the Microscope
• 2019.06 [myonlinesecurity] More AgentTesla keylogger and Nanocore RAT in one bundle
• 2019.06 [myonlinesecurity] Nanocore RAT via fake DHL failed delivery in Chinese
• 2019.06 [4hou] Diseccionando la cadena de ataque del malware NanoCore
• 2019.06 [yoroi] Dissecting NanoCore Crimeware Attack Chain
• 2019.05 [myonlinesecurity] nanocore RAT via fake order in password protected word doc with wrong password
• 2019.05 [myonlinesecurity] Fake Fedex Express Shipment For Pickup in iso delivers nanocore using Sendgrid
• 2019.05 [goggleheadedhacker] Unpacking NanoCore Sample Using AutoIT
• 2019.03 [carbonblack] TAU Threat Intelligence Notification: NanoCore – Old Malware, New Tricks!
• 2019.01 [myonlinesecurity] Fake Autec Power purchase Order delivers Nanocore RAT
• 2019.01 [myonlinesecurity] Nanocore via fake order using dde in csv files
• 2019.01 [myonlinesecurity] Nanocore RAT via fake order emails
• 2019.01 [malware] 2019-01-04 - MALSPAM PUSHES NANOCORE RAT
• 2018.11 [myonlinesecurity] Fake Payment Receipt delivers Nanocore RAT malware
• 2018.06 [UltraHacks] NanoCore [Free Download] [No Virus] [DL] | Ultra Hacks
• 2018.04 [myonlinesecurity] Fake PAYMENT CONFIRMATION emails deliver Nanocore RAT
• 2018.04 [myonlinesecurity] Nanocore Rat delivered via fake order emails
• 2018.04 [myonlinesecurity] Nanocore via fake Purchase order malspam using Microsoft Office Equation Editor exploits
• 2018.04 [myonlinesecurity] Nanocore RAT delivered by fake order malspam
• 2018.02 [krebsonsecurity] Bot Roundup: Avalanche, Kronos, NanoCore
• 2017.11 [myonlinesecurity] Fake Product Enquiry malspam delivers Nanocore RAT
• 2017.10 [fortinet] PDF Phishing Leads to Nanocore RAT, Targets French Nationals
• 2017.10 [fortinet] Archivo PDF malicioso con JavaScript incrustado que descarga un archivo HTA a través de un enlace compartido de Google Drive al iniciarse, y luego descarga y ejecuta el troyano de control remoto NanoCore desde el archivo HTA
• 2017.08 [myonlinesecurity] Angelika Rodriguez – [email protected] – Purchase Order malspam delivers nanocore RAT
• 2017.05 [netskope] NanocoreRAT delivery via cloud storage apps shifts from .uue to .r11
• 2017.03 [itsjack] Nanocore Cracked Alcatraz – Leaving The Door Open
• 2016.10 [sans] Malspam delivers NanoCore RAT
• 2016.02 [paloaltonetworks] NanoCoreRAT Behind an Increase in Tax-Themed Phishin
• 2015.11 [f] Halloween RAT: NanoCore Served Via PageFair Service
• 2015.04 [ensilo] NanoCore RAT: It’s Not 100% Original

NjRat

Herramientas

• [143estrellas][2y] [Visual Basic .NET] alibawazeeer/rat-njrat-0.7d-modded-source-code NJR
• [128estrellas][8d] [Visual Basic] mwsrc/njrat njRAT SRC Extract
• [14estrellas][5m] [C#] nyan-x-cat/njrat-0.7d-stub-csharp njRAT C# Stub - Fixed For PowerShell
• [3estrellas][2y] [Py] seep1959/njutils A client and chat program for njrat 0.6.4, 0.7d, and 0.7d golden edition.

Artículos

• 2019.12 [carbonblack] Threat Analysis Unit (TAU) Threat Intelligence Notification: njRAT
• 2019.09 [freebuf] Gorgon APT vuelve a hacer de las suyas: el tortuoso camino de DropBox a NJRat
• 2019.05 [morphisec] A look at Hworm / Houdini AKA njRAT
• 2019.05 [myonlinesecurity] Fake Payment receipt vbs drops njrat bladabindi downloads Agent Tesla via Sendspace.
• 2018.11 [trendmicro] Gusano compilado con AutoIt que afecta medios extraíbles y distribuye una versión sin archivos de la puerta trasera bladabindi/njRAT
• 2018.06 [360] Viejo árbol florece de nuevo: informe de análisis de malware de la familia njRAT
• 2018.06 [freebuf] Discusión técnica | njRAT elude la detección de 360 mediante ofuscación con codificación Base64 y bypass experimental
• 2018.04 [UltraHacks] njRAT v0.7 | Tutorial | www.ultrahacks.org | Ultra Hacks
• 2018.03 [broadanalysis] Guest Blog Post: njRat Analysis with Volatility
• 2018.01 [rsa] Malspam delivers njRAT 1-11-2018
• 2017.12 [malwarenailed] Revisiting HWorm and NjRAT
• 2016.12 [freebuf] El análisis más completo del protocolo de comunicación de njRAT
• 2016.08 [MalwareAnalysisForHedgehogs] Malware Analysis - Unpacking njRAT Protected by Confuser v.1.9 and others
• 2016.01 [sensecy] Is There A New njRAT Out There?
• 2015.12 [sec] Análisis de inteligencia de troyanos: njRAT y H-worm
• 2015.11 [alienvault] KilerRat: Taking over where Njrat remote access trojan left off
• 2015.08 [virusbulletin] Paper: Life after the apocalypse for the Middle Eastern NJRat campaign
• 2014.08 [mcafee] Trailing the Trojan njRAT
• 2014.08 [mcafee] Trailing the Trojan njRAT
• 2014.01 [rsa] Detecting njRAT in Your Environment

Revenge RAT

Herramientas

• [21estrellas][2m] [C#] nyan-x-cat/revengerat-stub-cssharp Revenge-RAT C# Stub - Fixed

Artículos

• 2020.01 [malware] 2020-01-15 - QUICK POST: MALSPAM PUSHING REVENGE RAT
• 2019.11 [fortinet] Double Trouble: RevengeRAT and WSHRAT
• 2019.09 [360] Revenge-RAT is used in phishing emails attacks against Italy
• 2019.04 [4hou] Operación Aggah: propagación de RevengeRAT mediante correos de phishing
• 2019.03 [alienvault] Mapping TrickBot and RevengeRAT with MITRE ATT&CK and AlienVault USM Anywhere
• 2019.02 [4hou] Llega la versión mejorada del malware Revenge RAT
• 2018.04 [dissectmalware] Stealthy VBScript dropper dropping Revenge RAT
• 2017.10 [rsa] Malspam Delivers Revenge RAT October-2017
• 2016.08 [deniable] Lurking Around Revenge-RAT

PlugX### Herramientas

• [28星][7y] [Py] kcreyts/plugxdecoder Decodes PlugX traffic and encrypted/compressed artifacts

Artículos

• 2020.01 [hexacorn] The Wizard of X – Oppa PlugX style, Part 2
• 2019.11 [BorjaMerino] Rebind Socket Windows: PoC PlugX Controller
• 2018.06 [countuponsecurity] Digital Forensics – PlugX and Artifacts left behind
• 2018.05 [countuponsecurity] Malware Analysis – PlugX – Part 2
• 2018.02 [4hou] Desvelando la capacidad de ataque de la familia de malware PlugX
• 2018.02 [360] Informe de análisis del malware PlugX
• 2018.02 [countuponsecurity] Malware Analysis – PlugX
• 2017.09 [fortinet] Deep Analysis of New Poison Ivy/PlugX Variant - Part II
• 2017.09 [fortinet] Análisis en profundidad de la nueva variante de Poison Ivy/PlugX
• 2017.09 [360] Stack overflow in PlugX RAT
• 2017.07 [hexacorn] The Wizard of X – Oppa PlugX style
• 2017.02 [jpcert] PlugX + Poison Ivy = PlugIvy? - PlugX Integrating Poison Ivy’s Code -
• 2016.06 [airbuscybersecurity] Getting a PlugX builder
• 2016.06 [cylance] CylancePROTECT® vs. PlugX – JTB Breach Affects 7.93 Million People in Japan
• 2016.03 [securelist] PlugX malware: A good hacker is an apologetic hacker
• 2015.11 [volatility] PlugX: Memory Forensics Lifecycle with Volatility
• 2015.09 [cyintanalysis] Using threat_note To Track Campaigns: Returning to PIVY and PlugX Infrastructure
• 2015.09 [airbuscybersecurity] Volatility plugin for PlugX updated
• 2015.08 [rebsnippets] PlugX Chronicles
• 2015.08 [cyintanalysis] Threat Analysis: Poison Ivy and Links to an Extended PlugX Campaign
• 2015.08 [airbuscybersecurity] Latest changes in PlugX
• 2015.05 [paloaltonetworks] PlugX Uses Legitimate Samsung Application for DLL Sid
• 2015.04 [freebuf] Análisis de malware: Las versiones oficiales taiwanesas de League of Legends y Path of Exile fueron infectadas con la herramienta de control remoto PlugX
• 2015.01 [jpcert] Analysis of a Recent PlugX Variant - "P2P PlugX"
• 2015.01 [] A Closer Look at PlugX from League of Legends / Path of Exile
• 2015.01 [trendmicro] PlugX Malware Found in Official Releases of League of Legends, Path of Exile
• 2014.06 [trendmicro] PlugX RAT With “Time Bomb” Abuses Dropbox for Command-and-Control Settings
• 2014.06 [lastline] An Analysis of PlugX Using Process Dumps from High-Resolution Malware Analysis
• 2014.01 [airbuscybersecurity] PlugX "v2": meet "SController"
• 2014.01 [airbuscybersecurity] PlugX: some uncovered points
• 2013.12 [lastline] An Analysis of PlugX Malware
• 2013.05 [freebuf] FireEye: Nuevo uso del viejo caballo PlugX, análisis de ataques APT contra actividades políticas chinas
• 2013.04 [trendmicro] New Wave of PlugX Targets Legitimate Apps
• 2013.04 [securelist] Winnti returns with PlugX
• 2012.09 [freebuf] Análisis completo del ataque dirigido por un experto extranjero al desarrollador de PlugX
• 2012.09 [alienvault] The connection between the Plugx Chinese gang and the latest Internet Explorer Zeroday
• 2012.09 [trendmicro] Unplugging PlugX Capabilities
• 2012.09 [alienvault] Tracking down the author of the PlugX RAT
• 2012.09 [freebuf] La nueva herramienta de control remoto PlugX está siendo utilizada en ataques de phishing contra el gobierno japonés
• 2012.09 [trendmicro] PlugX: New Tool For a Not So New Campaign

RemcosRAT

• 2019.10 [fortinet] New Variant of Remcos RAT Observed In the Wild
• 2019.09 [myonlinesecurity] Some changes to Remcos Rat persistence method
• 2019.09 [myonlinesecurity] Fake invoice tries to deliver Remcos RAT
• 2019.09 [freebuf] Análisis de una variante de Remcos RAT en correos de phishing
• 2019.08 [trendmicro] Analysis: New Remcos RAT Arrives Via Phishing Email
• 2019.06 [myonlinesecurity] Remcos Rat via fake invoice using multiple delivery methods.
• 2019.06 [HackerSploit] Remcos RAT Review - The Most Advanced Remote Access Tool
• 2018.11 [myonlinesecurity] More Fake DHL invoices delivering Remcos RAT via office XML files
• 2018.10 [myonlinesecurity] Fake DHL READ : (DHL Express) -Delivery Address Confirmation delivers Remcos Rat
• 2018.09 [myonlinesecurity] Fake Purchase Order email delivers Remcos RAT
• 2018.09 [360] Desvelando la botnet bajo Remcos
• 2018.08 [securityledger] Cisco Links Remote Access Tool Remcos to Cybercriminal Underground
• 2018.08 [talosintelligence] Picking Apart Remcos Botnet-In-A-Box
• 2018.08 [UltraHacks] Remcos RAT Tutorial | Remote Administration Tool | Ultra Hacks
• 2018.07 [myonlinesecurity] Fake DHL “Alert! Shipment Notification” delivers Remcos RAT
• 2018.05 [fortinet] Variante de Remcos se propaga explotando CVE-2017-11882
• 2018.04 [myonlinesecurity] Remcos RAT delivered by fake ” your workers are fighting” message
• 2018.04 [myonlinesecurity] Remcos RAT delivered via fake CCICM international debt recovery service
• 2018.04 [myonlinesecurity] Fake Payment recovery email spoofing CCICM international debt recovery service delivers Remcos rat via Microsoft Equation Editor Exploits
• 2018.03 [tencent] El nuevo troyano de control remoto Remcos explota la vulnerabilidad CVE-2017-11882 para ataques en tiempo real
• 2018.03 [myonlinesecurity] Fake order spoofed from Finchers ltd Sankyo-Rubber delivers Remcos RAT via ACE attachments
• 2017.09 [malwarebreakdown] Malvertising Leads to RIG EK and Drops Remcos RAT.
• 2017.09 [trendmicro] La plataforma en la nube Autodesk® A360 es utilizada para propagar Adwind, Remcos, Netwire RAT y otro malware
• 2017.08 [cybereason] Cybereason creates 'vaccine' to stop Remcos RAT
• 2017.02 [fortinet] REMCOS: A New RAT In The Wild

L0rdixRAT

• 2019.08 [bromium] Decrypting L0rdix RAT’s C2
• 2019.07 [bromium] An Analysis of L0rdix RAT, Panel and Builder
• 2018.11 [ensilo] L0RDIX: Multipurpose Attack Tool

LodaRAT

• 2020.02 [talosintelligence] Loda RAT Grows Up

GulfRAT

• 2020.01 [TheCyberWire] Phishing with a RAT in the Gulf. More on how Jeff Bezos was hacked. Microsoft discloses data...
• 2020.01 [TheCyberWire] Escalation in the Gulf as a US air strike kills Iran’s Quds commander. Travelex and RavnAir...
• 2019.08 [nettitude] Tanker Cyber Attacks taking place in the Gulf
• 2017.09 [mikefrobbins] PowerShell Toolmaking session this Saturday, September 30th at Gulf Coast Code Camp 2017 in Mobile, Alabama
• 2016.11 [fireeye] FireEye Responds to Wave of Destructive Cyber Attacks in Gulf Region
• 2016.03 [elearnsecurity] Visit eLearnSecurity on Gulf Information Security and Gulf Expo 2016 in Dubai
• 2015.07 [welivesecurity] New report explains gulf between security experts and non-experts
• 2010.08 [publicintelligence] Los Zetas and Gulf Cartel Perpetrators of Mexican Drug Trafficking Violence Organizational Chart
• 2010.05 [publicintelligence] BP Minerals Management Service Workshop Brief: Unlocking Gulf of Mexico “Technological Challenges”

NetWireRAT

• 2020.01 [securityintelligence] New NetWire RAT Campaigns Use IMG Attachments to Deliver Malware Targeting Enterprise Users
• 2019.11 [carbonblack] Active C2 Discovery Using Protocol Emulation Part1 (HYDSEVEN NetWire)
• 2019.09 [fortinet] New NetWire RAT Variant Being Spread Via Phishing
• 2019.08 [malware] 2019-08-23 - DATA DUMP (URSNIF, RIG EK, NETWIRE RAT)
• 2019.04 [myonlinesecurity] Fake DHL Shipment Notification delivers Netwire Trojan
• 2018.11 [traffic] [2018-11-21] HookAds->FalloutEK->AZORult->NetWireRAT
• 2017.11 [myonlinesecurity] Fake HSBC Advising Service Payment Advice malspam delivers Netwire trojan
• 2017.10 [myonlinesecurity] Fake HSBC Swift Copy delivers Netwire trojan
• 2017.09 [TechnoHacker] NetWire HKCU/Run vs ActiveX Startup
• 2017.08 [TechnoHacker] Netwire Tutorial: How to Sign the Android Host
• 2017.04 [TechnoHacker] How to crypt Netwire with Cyberseal
• 2017.04 [TechnoHacker] Netwire RAT Review
• 2014.08 [paloaltonetworks] NetWire and MITRE
• 2014.08 [paloaltonetworks] New Release: Decrypting NetWire C

JhoneRAT

• 2020.01 [talosintelligence] JhoneRAT: Cloud based python RAT targeting Middle Eastern countries

Dacls

• 2019.12 [360] El grupo Lazarus utiliza Dacls RAT para atacar plataformas Linux
• 2019.12 [360] Dacls, the Dual platform RAT

BlackRemote

• 2019.12 [carbonblack] Threat Analysis Unit (TAU) Threat Intelligence Notification: BlackRemote RAT

Orcus

• 2019.11 [krebsonsecurity] Orcus RAT Author Charged in Malware Scheme
• 2019.01 [morphisec] New Campaign Delivers Orcus RAT
• 2018.04 [freebuf] Análisis de una muestra del troyano de control remoto Orcus propagado a través de archivos SYLK
• 2017.12 [fortinet] Circle of the fraud: more information about Bitcoin Orcus RAT campaign
• 2017.12 [fortinet] Circle of the fraud: more information about Bitcoin Orcus RAT campaign
• 2017.12 [fortinet] A Peculiar Case of Orcus RAT Targeting Bitcoin Investors
• 2017.12 [fortinet] Orcus apunta a inversores de Bitcoin, disfrazándose como el bot de trading Gunbot para propagarse
• 2017.05 [freebuf] Pasos para resolver la máquina virtual Orcus
• 2017.04 [hackingarticles] Hack the Orcus VM CTF Challenge
• 2017.04 [techanarchy] VulnHub Orcus Solution
• 2017.03 [vulnhub] hackfest2016: Orcus
• 2017.03 [vulnhub] hackfest2016: Orcus
• 2016.08 [deniable] Cracking Orcus RAT
• 2016.08 [deniable] Cracking Orcus RAT
• 2016.08 [deniable] Cracking Orcus RAT
• 2016.08 [paloaltonetworks] Orcus – Birth of an unusual plugin bu
• 2016.07 [krebsonsecurity] Canadian Man Behind Popular ‘Orcus RAT’

NukeSped

• 2019.10 [fortinet] A Deep-Dive Analysis of the NukeSped RATs

DarkComet- 2018.09 [UltraHacks] How to setup DarkCometRAT 5.3.1 + Portforward

• 2018.04 [freebuf] CVE-2017-11882新动态：利用AutoIT脚本释放DarkComet后门
• 2018.03 [tencent] CVE-2017-11882新动态：利用AutoIT脚本释放DarkComet后门
• 2017.10 [rsa] Malspam Delivers DarkComet RAT October-2017
• 2017.01 [HackingMonks] Darkcomet Rat Tutorial (Trojans are awesome)
• 2016.02 [hackingarticles] Hack Remote PC using Darkcomet RAT with Metasploit
• 2015.11 [TechnoHacker] How to setup DarkComet RAT [Voice Tutorial] [Download Link]
• 2015.07 [SecurityBSidesLondon] Kevin Breen - DarkComet From Defense To Offense - Identify your Attacker
• 2015.03 [heimdalsecurity] Security Alert: Infamous DarkComet RAT Used In Spear Phishing Campaigns
• 2015.03 [sketchymoose] Smooshing the Square Peg into the Round Hole: DarkComet Plugin for 64-bit images
• 2012.07 [freebuf] DarkComet RAT作者宣布项目停止开发
• 2012.06 [freebuf] [更新]一款强大的远控 – DarkComet RAT V5.3.1
• 2012.06 [malwarebytes] You dirty RAT! Part 1: DarkComet
• 2012.04 [trendmicro] Fake Skype Encryption Software Cloaks DarkComet Trojan
• 2012.04 [toolswatch] DarkComet-RAT Remote Administration Tool v5.1.1 released
• 2012.03 [quequero] DarkComet Analysis – Understanding the Trojan used in Syrian Uprising
• 2012.02 [trendmicro] DarkComet Surfaced in the Targeted Attacks in Syrian Conflict
• 2011.08 [toolswatch] DarkComet-RAT (Remote Administration Tool) v4.0 Fix 1 available
• 2011.05 [toolswatch] DarkComet-RAT v3.3 available
• 2011.01 [toolswatch] (EXCLUSIVE) DarkComet-RAT updated to v3.0.1
• 2011.01 [toolswatch] EXCLUSIVE : DarkComet-RAT 3.0 released (Impressive RAT tool)

WarZone RAT

• 2018.11 [UltraHacks] Warzone RAT C++ | Hidden VNC [PROMOTION VIDEO]| Ultra Hacks

BlackShades

• 2017.01 [TechnoHacker] Blackshades Revisited
• 2016.02 [TechnoHacker] How to use Blackshades [download link]
• 2016.02 [TechnoHacker] How to setup Blackshades RAT [Voice Tutorial] [download link]
• 2014.05 [malwarebytes] Taking off the Blackshades
• 2014.05 [endgame] Blackshades: Why We Should Care About Old Malware
• 2014.05 [trendmicro] The Blackshades RAT – Entry-Level Cybercrime
• 2014.05 [publicintelligence] FBI Blackshades Remote Access Tool Private Sector Bulletins and Domain List
• 2014.05 [alienvault] Blackshades Smackdown & Poking China in the Eye
• 2014.05 [cylance] A Study in Bots: BlackShades Net
• 2014.05 [welivesecurity] Behind Blackshades: a closer look at the latest FBI cyber crime arrests
• 2014.05 [krebsonsecurity] ‘Blackshades’ Trojan Users Had It Coming
• 2014.05 [malwaretech] FBI Cybercrime Crackdown – Blackshades
• 2012.07 [malwarebytes] BlackShades Co-Creator Arrested!
• 2012.06 [malwarebytes] BlackShades in Syria
• 2012.06 [citizenlab] Syrian Activists Targeted with BlackShades Spy Software
• 2012.06 [malwarebytes] You Dirty RAT! Part 2 – BlackShades NET

DenesRAT

• 2019.10 [nsfocus] Análisis del troyano DenesRAT de la organización OceanLotus (APT32) y de la cadena de ataque relacionada

WSH RAT

• 2019.10 [angelalonso] WSH RAT - Analysis of the code
• 2019.10 [angelalonso] Fudcrypt using H-Worm from WSH RAT
• 2019.09 [freebuf] Los hackers compran nuevas muestras de la última variante de WSH RAT para atacar a clientes bancarios
• 2019.09 [angelalonso] WSH RAT and the link to unknowcrypter and Fudcrypt

Qrypter RAT

• 2018.04 [4hou] Análisis del funcionamiento del cada vez más popular Qrypter RAT
• 2017.12 [angelalonso] Qrypter Java RAT using Tor

Adwind

• 2019.08 [4hou] Adwind RAT se utiliza ampliamente en ataques contra el sector de servicios públicos
• 2018.10 [reversinglabs] eWeek: Cisco Talos and ReversingLabs warn that the Adwind Remote Access Trojan (RAT) has added capabilities that enable it bypass some anti-virus technologies
• 2018.04 [4hou] Las campañas de spam utilizan las puertas traseras XTRAT, DUNIHI y Adwind
• 2018.04 [trendmicro] Los investigadores de Trend Micro monitorean spam que distribuye el RAT multiplataforma Adwind, junto con las puertas traseras XTRAT, DUNIHI y Loki
• 2018.04 [ensilo] enSilo Blocks New Variant of Adwind RAT
• 2018.03 [OALabs] Analyzing Adwind / JRAT Java Malware
• 2018.03 [heimdalsecurity] Security Alert: Spam Campaign Spreads Adwind RAT variant, Targeting Computer Systems
• 2018.02 [fortinet] New jRAT/Adwind Variant Being Spread With Package Delivery Scam
• 2018.02 [rsa] Winds of Winter - MalSpam Delivers Adwind RAT 2-1-2018
• 2018.02 [myonlinesecurity] Fake Swift Copy malspam via compromised sites delivering Java Adwind/ QRAT /JRAT Trojan
• 2017.12 [myonlinesecurity] Fake “Your UPS Invoice Is Ready” malspam delivers Java Adwind / Java JRAT Trojan
• 2017.08 [netskope] Adwind RAT employs new obfuscation techniques
• 2017.07 [trendmicro] Spam Campaign Delivers Cross-platform Remote Access Trojan Adwind
• 2017.03 [freebuf] El RAT Adwind ataca a empresas, apuntando a más de 100 países y regiones
• 2017.01 [codemetrix] Decrypting Adwind jRAT jBifrost trojan
• 2016.08 [fortinet] JBifrost: Yet Another Incarnation of the Adwind RAT
• 2016.07 [heimdalsecurity] Security Alert: Adwind RAT Used in Targeted Attacks with Zero AV Detection
• 2016.02 [securelist] Expert: cross-platform Adwind RAT
• 2016.02 [kaspersky] The wind that smells like RAT: The story of Adwind MaaS
• 2013.11 [crowdstrike] Adwind RAT Rebranding

CannibalRAT

• 2018.02 [talosintelligence] CannibalRAT targets Brazil

jRAT

• 2018.10 [cofense] H-Worm and jRAT Malware: Two RATs are Better than One
• 2018.08 [Sebdraven] Lammers, stealers and RATs: same technics like Formbook malware to install JRAT and HawkEye…
• 2018.03 [trustwave] Crypter-as-a-Service Helps jRAT Fly Under The Radar

jsRAT

• 2018.02 [netskope] ShortJSRAT leverages cloud with scriptlets
• 2017.07 [rsa] Recreating the Crime Scene - A JSRat Story
• 2016.05 [evi1cg] Varios métodos de inicio de JSRAT
• 2016.03 [hackingarticles] Hack Remote Windows 10 PC using JSRAT
• 2015.07 [secist] Usar JSRAT para administrar de forma remota un sistema Windows 10

CrossRat

• 2018.01 [360] Análisis de un malware multiplataforma CrossRAT en una campaña de ciberespionaje global (Parte 2)
• 2018.01 [4hou] Análisis del software de control remoto CrossRAT
• 2018.01 [360] Análisis de un malware multiplataforma CrossRAT en una campaña de ciberespionaje global (Parte 1)
• 2018.01 [objective] Análisis del RAT multiplataforma CrossRAT utilizado en ciberespionaje global

ArmaRat

• 2018.09 [360] ArmaRat: Campaña de espionaje de dos años dirigida a usuarios iraníes

RokRAT

• 2018.01 [morphisec] Threat Profile: RokRAT
• 2017.12 [MalwareAnalysisForHedgehogs] Malware Analysis - ROKRAT Unpacking from Injected Shellcode
• 2017.11 [talosintelligence] ROKRAT Reloaded
• 2017.06 [alienvault] A RAT that Tweets: New ROKRAT Malware Hides behind Twitter, Amazon, and Hulu Traffic
• 2017.04 [360] Análisis del troyano ROKRAT que utiliza plataformas en la nube
• 2017.04 [talosintelligence] Análisis del RAT ROKRAT: desde phishing hasta payload, usando Twitter/Yandex/Mediafire como C&C.

CatKARAT

• 2018.01 [hackingarticles] TCP & UDP Packet Crafting with CatKARAT

TheFatRat

• 2018.11 [freebuf] Compartir técnico | Mira cómo uso TheFatRat para hackear tu teléfono Android
• 2017.11 [TheHackerStuff] TheFatRat - Hacking Over WAN - Embedding Payload in Original Android APK - Without Port Forwarding
• 2016.12 [TheHackerStuff] Kali Linux - TheFatRat - Creating an Undetectable Backdoor - Bypass all AntiVirus
• 2016.09 [freebuf] TheFatRat: Herramienta de generación de puertas traseras fácil de usar para Msfvenom
• 2016.07 [hackingarticles] Hack Remote Windows 10 PC using TheFatRat

OmniRAT

• 2017.07 [skycure] Nasty backdoor OmniRAT is back, disguised as GhostCtrl on Android mobile devices
• 2015.11 [freebuf] Variante del troyano OmniRAT explotada maliciosamente

Otros- 2020.02 [proofpoint] Proofpoint Q4 2019 Threat Report and Year in Review — The Year of the RAT Ends with More of the Same

• 2020.01 [sentinelone] CISO Essentials | How Remote Access Trojans Affect the Enterprise
• 2020.01 [TheCyberWire] RATs, backdoors, and a remote code execution zero-day. Hoods breach Mitsubishi Electric. Telnet...
• 2020.01 [freebuf] Informe de análisis sobre la implantación de troyanos de acceso remoto en certificados digitales válidos
• 2020.01 [rambus] Cable Haunt vulnerability can give hackers remote access to approximately 200 million cable modems
• 2020.01 [proofpoint] Threat Insight 2019 in Review: Year of the RAT
• 2019.12 [ptsecurity] Turkish tricks with worms, RATs… and a freelancer
• 2019.12 [infosecinstitute] Malware spotlight: What is a Remote Access Trojan (RAT)?
• 2019.12 [UltraHacks] Dark Shades Android RAT | Ultra Hacks
• 2019.11 [broadanalysis] Fallout Exploit Kit delivers suspect Remote Access Trojan (RAT)
• 2019.11 [carbonblack] Threat Analysis Unit (TAU) Threat Intelligence Notification: AsyncRAT
• 2019.11 [proofpoint] Proofpoint Q3 2019 Threat Report — Emotet’s return, RATs reign supreme, and more
• 2019.10 [tencent] KuaiGoMiner controla decenas de miles de ordenadores para minería, libera troyanos de acceso remoto para robar secretos
• 2019.10 [4hou] KuaiGoMiner controla decenas de miles de ordenadores para minería, libera troyanos de acceso remoto para robar secretos
• 2019.10 [proofpoint] TA505 Distributes New SDBbot Remote Access Trojan with Get2 Downloader
• 2019.10 [tencent] El gusano "Moonlight" amenaza las redes universitarias, los ordenadores infectados son controlados de forma remota
• 2019.10 [4hou] El gusano "Moonlight" amenaza las redes universitarias, los ordenadores infectados son controlados de forma remota
• 2019.10 [freebuf] Viaje de contraespionaje: análisis de la primera herramienta de troyano de acceso remoto para Android
• 2019.09 [4hou] Grupo de virus utiliza la vulnerabilidad RCE de phpStudy para capturar equipos a gran escala, libera cuatro troyanos de acceso remoto
• 2019.09 [aliyun] Uso de badUSB para infectar con troyano de acceso remoto
• 2019.09 [sensecy] ARABIC-SPEAKING THREAT ACTOR RECYCLES THE SOURCE CODE OF POPULAR RAT SPYNOTE AND SELLS IT IN THE DARK WEB, AS NEW
• 2019.08 [securelist] Fully equipped Spying Android RAT from Brazil: BRATA
• 2019.08 [talosintelligence] RAT Ratatouille: Backdooring PCs with leaked RATs
• 2019.08 [malware] 2019-08-26 - DATA DUMP: SOCGHOLISH CAMPAIGN PUSHES NETSUPPORT RAT
• 2019.08 [fortinet] Fake Indian Income Tax Calculator Delivers xRAT Variant
• 2019.07 [tencent] Nueva actividad de la familia de correos comerciales: propagación del troyano de acceso remoto RevetRAT mediante phishing por correo electrónico
• 2019.07 [freebuf] Puntos de conocimiento que deberías conocer sobre los troyanos de acceso remoto
• 2019.07 [trendmicro] Spam Campaign Targets Colombian Entities with Custom-made ‘Proyecto RAT,’ Uses Email Service YOPmail for C&C
• 2019.07 [freebuf] Componente central de APT34, Glimpse: reproducción del control remoto y análisis de tráfico
• 2019.07 [d] Red Team Diary, Entry #1: Making NSA’s PeddleCheap RAT Invisible
• 2019.07 [yoroi] Spotting RATs: Tales from a Criminal Attack
• 2019.07 [cybersecpolitics] Book Review: Delusions of Intelligence, R.A. RATCLIFF
• 2019.07 [4hou] Explorando la evolución de los troyanos: análisis transversal de múltiples versiones del RAT Ratsnif de APT32
• 2019.07 [4hou] Breve charla sobre los troyanos de acceso remoto
• 2019.07 [freebuf] Entrega de enlace malicioso .lnk usando JwsclTerminalServer para lograr control remoto y obtener información
• 2019.07 [securityintelligence] Taking Over the Overlay: What Triggers the AVLay Remote Access Trojan (RAT)?
• 2019.07 [securityintelligence] Taking Over the Overlay: Reverse Engineering a Brazilian Remote Access Trojan (RAT)
• 2019.07 [talosintelligence] RATs and stealers rush through “Heaven’s Gate” with new loader
• 2019.06 [4hou] Cuidado con el gusano H-worm disfrazado de muestra de película: hacer clic imprudentemente en el archivo adjunto puede infectar con un troyano de acceso remoto
• 2019.06 [nightst0rm] Tôi đã chiếm quyền điều khiển của rất nhiều trang web như thế nào?
• 2019.06 [4hou] TA505 utiliza HTML, RAT y otras técnicas en sus últimas campañas de ataque
• 2019.06 [trendmicro] Shifting Tactics: Breaking Down TA505 Group’s Use of HTML, RATs and Other Techniques in Latest Campaigns
• 2019.05 [4hou] Babylon RAT mejora la capacidad de multitarea del malware
• 2019.05 [360] Registro de una campaña de spam que utiliza macros XLM para distribuir herramientas de control remoto
• 2019.05 [arxiv] [1905.07273] Finding Rats in Cats: Detecting Stealthy Attacks using Group Anomaly Detection
• 2019.05 [freebuf] Práctica del RAT Ares basado en Python con arquitectura cliente-servidor
• 2019.05 [4hou] Herramienta C&C de control remoto: WebSocket C2
• 2019.04 [paloaltonetworks] BabyShark Malware Part Two – Attacks Continue Using KimJongRAT
• 2019.04 [freebuf] Mira cómo descubro al responsable detrás del control remoto
• 2019.04 [4hou] Herramienta C&C de control remoto: Ares
• 2019.04 [krebsonsecurity] Who’s Behind the RevCode WebMonitor RAT?
• 2019.04 [freebuf] Análisis de muestra de minería de Monero y troyano de acceso remoto
• 2019.04 [4hou] Análisis de muestra de minería de Monero + troyano de acceso remoto
• 2019.04 [4hou] LimeRAT se propaga en la naturaleza
• 2019.04 [yoroi] LimeRAT spreads in the wild
• 2019.04 [alexander] Week 6 Cyberattack Digest 2019 – ExileRAT trojan, Eskom Group, and others
• 2019.03 [360] El autor del troyano envía activamente el backdoor de control remoto Tatoo
• 2019.03 [flashpoint] FIN7 Revisited: Inside Astra Panel and SQLRat Malware
• 2019.03 [tencent] El troyano minero ataca servidores SQL mediante fuerza bruta; la infección puede permitir el control remoto del servidor
• 2019.03 [paloaltonetworks] Cardinal RAT Sins Again, Targets Israeli Fin-T
• 2019.03 [aliyun] Análisis de cómo usar JAVA-VBS para propagar RAT
• 2019.03 [malware] 2019-03-06 - QUICK POST: KOREAN MALSPAM PUSHES FLAWED AMMYY RAT MALWARE
• 2019.03 [4hou] JAVA+VBS propaga RAT
• 2019.03 [mcafee] JAVA-VBS Joint Exercise Delivers RAT
• 2019.02 [dodgethissecurity] Reverse Engineering an Unknown RAT – Lets call it SkidRAT 1.0
• 2019.02 [4hou] ExileRAT comparte infraestructura C2 con LuckyCat
• 2019.02 [freebuf] El patinete eléctrico Xiaomi M365 enfrenta riesgos de ataque hacker y control remoto
• 2019.02 [myonlinesecurity] Fake Blockchain authentication update delivers Dark Comet RAT
• 2019.02 [securityartwork] Case study: “Imminent RATs” (III)
• 2019.02 [securityartwork] Case study: “Imminent RATs” (II)
• 2019.02 [securityledger] ExileRAT Malware Targets Tibetan Exile Government
• 2019.02 [securityartwork] Case study: “Imminent RATs” (I)
• 2019.02 [talosintelligence] ExileRAT shares C2 with LuckyCat, targets Tibet
• 2019.02 [0x00sec] Programming language for Remote Access Toolkit
• 2019.01 [angelalonso] Fudcrypt: the service to crypt Java RAT through VBS scripts and Houdini malware
• 2019.01 [yoroi] The Story of Manuel’s Java RAT
• 2019.01 [0x00sec] RATs question. Long break
• 2019.01 [aliyun] Análisis de amenazas RAT utilizando tecnología AMP
• 2019.01 [360] Explotación remota de dispositivos mediante vulnerabilidades en Marvell Avastar Wi-Fi: desde principiante hasta explotación de RCE (Parte 2)
• 2019.01 [aliyun] Propagación de malware .Net RAT mediante documentos de MS Word
• 2019.01 [tencent] Tencent PC Manager: el troyano de acceso remoto "Big Bad Wolf" se disfraza de "miembros del club" para propagarse
• 2019.01 [360] Explotación remota de dispositivos mediante vulnerabilidades en Marvell Avastar Wi-Fi: desde principiante hasta explotación de RCE (Parte 1)
• 2019.01 [4hou] Propagación de malware .Net RAT mediante documentos de MS Word
• 2019.01 [0x00sec] VPS or a VPN for a RAT?
• 2019.01 [talosintelligence] What we learned by unpacking a recent wave of Imminent RAT infections using AMP
• 2019.01 [fortinet] .Net RAT Malware Being Spread by MS Word Documents
• 2019.01 [4hou] TA505 añade nuevos ServHelper Backdoor y FlawedGrace RAT a su arsenal
• 2019.01 [tencent] Secuestro del navegador, control remoto, inflado de visualizaciones de video: ¡esta herramienta de activación crackeada es tóxica!
• 2019.01 [4hou] Adware disfrazado de juego y aplicación de control remoto infecta a 9 millones de usuarios de Google Play
• 2019.01 [UltraHacks] Ozone RAT C++ | Hidden VNC [TUTORIAL VIDEO] | Ultra Hacks
• 2019.01 [micropoor] Penetración persistente avanzada - Temporada 8, demo es control remoto
• 2019.01 [tencent] Sospechosa actividad de ataque dirigido del grupo Gorgon contra el sector de comercio exterior chino utilizando el troyano de acceso remoto Azorult
• 2019.01 [4hou] Ransomware JungleSec infecta víctimas a través de la consola de control remoto IPMI
• 2019.01 [sans] Remote Access Tools: The Hidden Threats Inside Your Network
• 2018.12 [freebuf] tRat: un nuevo RAT modular que aparece en múltiples campañas de correo no deseado
• 2018.12 [k7computing] Scumbag Combo: Agent Tesla and XpertRAT
• 2018.12 [360] Flash 0day + Hacking Team RAT: actividades de ataque y análisis de correlación que explotan la vulnerabilidad Flash 0day más reciente
• 2018.12 [freebuf] Flash 0day + Hacking Team RAT: actividades de ataque y análisis de correlación que explotan la vulnerabilidad Flash 0day más reciente
• 2018.11 [4hou] tRat: nuevo RAT modular
• 2018.11 [proofpoint] tRat: nuevo RAT modular propagado en múltiples campañas de spam
• 2018.11 [checkpoint] October 2018’s Most Wanted Malware: For The First Time, Remote Access Trojan Reaches Top 10 Threats | Check Point Software Blog
• 2018.11 [checkpoint] October 2018’s Most Wanted Malware: For The First Time, Remote Access Trojan Reaches Global Threat Index’s Top 10
• 2018.10 [DEFCONConference] DEF CON 26 CAR HACKING VILLAGE - Dan Regalado - Meet Salinas, 1st SMS commanded Car Infotainment RAT
• 2018.10 [cybrary] “I smell a rat!” – AhMyth, not a Myth
• 2018.10 [4hou] Cómo usar RAT para atacar en el ámbito industrial
• 2018.10 [360] Troyano de acceso remoto roba la firma oficial de NetEase
• 2018.10 [ncsc] RATs, Mimikatz and other domestic pests
• 2018.10 [infosecinstitute] Interview with RaT, the High Council President of SOLDIERX
• 2018.10 [vulnerability0lab] Facebook Inc via Instagram Business - Remote Access Token Vulnerability (Original Facebook Video)
• 2018.10 [securityledger] Episode 114: Complexity at Root of Facebook Breach and LoJax is a RAT You Can’t Kill
• 2018.10 [sophos] IP EXPO Europe 2018: Sophos experts talk AI, privacy vs security, and RATs
• 2018.09 [kaspersky] Threats posed by using RATs in ICS
• 2018.09 [kaspersky] Industrial networks in need of RAT control
• 2018.09 [securelist] Threats posed by using RATs in ICS
• 2018.08 [traffic] [2018-08-22] Unknown->RigEK->AZORult->BabylonRAT
• 2018.08 [freebuf] Hero RAT: un malware Android basado en Telegram
• 2018.08 [4hou] Campaña de spam abusa de SettingContent-ms para distribuir FlawedAmmyy RAT
• 2018.08 [aliyun] Análisis de HeroRAT, malware Android basado en Telegram
• 2018.08 [alienvault] Off-the-shelf RATs Targeting Pakistan
• 2018.07 [k7computing] Weaponized.IQY: A Quest to Deliver the FlawedAmmyy RAT
• 2018.07 [trendmicro] Spam Campaign Abusing SettingContent-ms Found Dropping Same FlawedAmmy RAT Distributed by Necurs
• 2018.07 [k7computing] Weaponized.IQY: A Quest to Deliver the FlawedAmmyy RAT
• 2018.07 [4hou] Parasite RAT altamente complejo aparece en la dark web
• 2018.07 [proofpoint] Parasite HTTP RAT cooks up a stew of stealthy tricks
• 2018.07 [aliyun] Análisis profundo de Vermin RAThole
• 2018.07 [proofpoint] TA505 Abusing SettingContent-ms within PDF files to Distribute FlawedAmmyy RAT
• 2018.07 [welivesecurity] Vermin, uno de los tres RAT utilizados para espiar instituciones gubernamentales ucranianas
• 2018.07 [freebuf] HeroRAT: un nuevo troyano de acceso remoto para Android basado en Telegram
• 2018.06 [heimdalsecurity] Security Alert: New Spam Campaign Delivers Flawed Ammyy RAT to Infect Victims’ Computers
• 2018.06 [welivesecurity] HeroRAT: RAT de Android basado en Telegram, escrito con el framework Xamarin
• 2018.06 [4hou] Última alerta técnica del gobierno de EE. UU.: cuidado con dos RAT y un gusano utilizados por el grupo hacker norcoreano Hidden Cobra
• 2018.06 [4hou] NavRAT utiliza la cumbre entre EE. UU. y Corea del Norte como señuelo para ataques contra Corea del Sur
• 2018.06 [360] NavRAT aprovecha el tema de la cumbre EE. UU.-Corea del Norte para atacar Corea del Sur
• 2018.05 [talosintelligence] NavRAT Uses US-North Korea Summit As Decoy For Attacks In South Korea
• 2018.05 [myonlinesecurity] Necurs delivering Flawed Ammy RAT via IQY Excel Web Query files
• 2018.05 [freebuf] Sitios Drupal hackeados se utilizan para minería, propagación de RAT y envío de correos de phishing
• 2018.05 [andreafortuna] Malware VM detection techniques evolving: an analysis of GravityRAT
• 2018.05 [360] GravityRAT: historia de la evolución de dos años de un APT dirigido a India
• 2018.05 [pcsxcetrasupport3] A closer look at “NetSupport”(Rat) top 2 layers
• 2018.05 [freebuf] Leyenda mítica: un troyano de acceso remoto propagado mediante la venta de cuentas en grupos de WeChat
• 2018.04 [virusbulletin] GravityRAT malware takes your system's temperature
• 2018.04 [360] Leyenda mítica: troyano de acceso remoto propagado a través de grupos de WeChat para vender cuentas
• 2018.04 [talosintelligence] GravityRAT - The Two-Year Evolution Of An APT Targeting India
• 2018.04 [UltraHacks] WebMonitor RAT - NO PORTFORWARD NEEDED + FREE VPN NEW
• 2018.04 [4hou] Análisis del troyano de acceso remoto de "complemento para comer pollo"
• 2018.04 [freebuf] Análisis del troyano de acceso remoto de "complemento para comer pollo"
• 2018.04 [360] Análisis del troyano de acceso remoto de "complemento para comer pollo"
• 2018.04 [4hou] Construcción de infraestructura de control remoto utilizando Digital Ocean
• 2018.04 [flashpoint] RAT Gone Rogue: Meet ARS VBS Loader
• 2018.04 [lookout] mAPT ViperRAT Found in Google Play
• 2018.04 [bitdefender] RadRAT: An all-in-one toolkit for complex espionage ops
• 2018.04 [paloaltonetworks] Say “Cheese”: WebMonitor RAT Comes with C2-as-a-Servic
• 2018.04 [freebuf] Programación hacker en Delphi (3): implementación del principio de control remoto simple
• 2018.04 [fireeye] Fake Software Update Abuses NetSupport Remote Access Tool
• 2018.04 [freebuf] PowerShell-RAT: un backdoor basado en Python
• 2018.03 [UltraHacks] Spynote v5.8 Android RAT | Tutorial | www.ultrahacks.org | Ultra Hacks
• 2018.03 [360] TeleRAT: se descubre nuevamente un malware Android que utiliza Telegram para atacar a usuarios iraníes
• 2018.03 [paloaltonetworks] TeleRAT: Another Android Trojan Leveraging Telegram’s Bot API to Target Iran
• 2018.03 [4hou] Se descubren más de diez vulnerabilidades de seguridad en las cámaras Samsung SmartCam, permitiendo control remoto y modificación de video
• 2018.03 [360] Análisis detallado del backdoor multiplataforma Coldroot RAT para OS X
• 2018.03 [freebuf] Magia negra del front-end: control remoto de la barra de direcciones
• 2018.03 [broadanalysis] EiTest campaign Hoefler Text Pop-up delivers NetSupport Manager RAT
• 2018.03 [leavesongs] Magia negra del front-end: control remoto de la barra de direcciones
• 2018.03 [broadanalysis] Fake Flash update leads to NetSupport RAT
• 2018.03 [broadanalysis] EiTest campaign Hoefler Text Pop-up delivers NetSupport Manager RAT
• 2018.03 [4hou] ¡Alta definición sin censura! ¡Más emocionante que una película de fantasmas! Escucha la canción de terror del RAT "Muñeca diabólica"
• 2018.03 [freebuf] ¡Alta definición sin censura! ¡Más emocionante que una película de fantasmas! Escucha la canción de terror del RAT "Muñeca diabólica"
• 2018.03 [360] ¡No apto para cobardes! ¡Más emocionante que una película de fantasmas! Escucha la canción de terror del RAT "Muñeca diabólica"
• 2018.02 [broadanalysis] Fake Flash update leads to NetSupport RAT
• 2018.02 [broadanalysis] EiTest campaign Hoefler Text Pop-up delivers NetSupport Manager RAT
• 2018.02 [myonlinesecurity] Fake DHL notification delivers some sort of Java RAT
• 2018.02 [4hou] Nueva variante de AndroRAT explota vulnerabilidades de root obsoletas para atacar
• 2018.02 [objective] Tearing Apart the Undetected (OSX)Coldroot RAT
• 2018.02 [trendmicro] New AndroRAT Exploits Dated Privilege Escalation Vulnerability, Allows Permanent Rooting
• 2018.02 [360] Troyano de acceso remoto crea una trampa de "blanco más negro": apunta a mayoristas de tiendas en línea para obtener dinero
• 2018.01 [broadanalysis] EiTest campaign Hoefler Text Pop-up delivers NetSupport Manager RAT
• 2018.01 [4hou] Juego Blizzard presenta grave vulnerabilidad de control remoto, afecta a cientos de millones de usuarios
• 2018.01 [riskiq] Espionage Campaign Leverages Spear Phishing, RATs Against Turkish Defense Contractors
• 2018.01 [freebuf] Análisis de muestra que combina la vulnerabilidad NDAY CVE-2017-11882 y la 0Day CVE-2018-0802 para propagar troyanos de acceso remoto
• 2018.01 [broadanalysis] EiTest campaign Hoefler Text Pop-up delivers NetSupport Manager RAT
• 2018.01 [netskope] Git Your RATs Here!
• 2018.01 [redcanary] We Smell a RAT: Detecting a Remote Access Trojan That Snuck Past a User
• 2018.01 [rsa] Malspam delivers BITTER RAT 01-07-2018
• 2018.01 [freebuf] Virus C# móvil "resurge", utiliza comunicación con aplicaciones conocidas para robar privacidad mediante control remoto
• 2017.12 [tencent] Análisis del troyano de acceso remoto Torchwood propagado a través de archivos CHM
• 2017.12 [avlsec] Virus C# móvil "resurge", utiliza comunicación con aplicaciones conocidas para robar privacidad mediante control remoto
• 2017.12 [broadanalysis] Fake Flash Player update delivers Net Support RAT
• 2017.12 [netskope] TelegramRAT evades traditional defenses via the cloud
• 2017.12 [4hou] Último descubrimiento de Palo Alto Networks: programa de acceso remoto UBoatRAT invade el este de Asia
• 2017.12 [TechnoHacker] RATs in a Nutshell
• 2017.11 [paloaltonetworks] UBoatRAT Navigates
• 2017.11 [buguroo] New banking malware in Brazil - XPCTRA RAT ANALYSIS
• 2017.11 [traffic] [2017-11-18] KaiXinEK->RAT
• 2017.11 [freebuf] Análisis del troyano de acceso remoto Torchwood propagado a través de archivos CHM
• 2017.11 [qq] Análisis del troyano de acceso remoto Torchwood propagado a través de archivos CHM
• 2017.11 [TechnicalMujeeb] A-RAt exploit Tool Remote Access Android using Termux App.
• 2017.11 [securityintelligence] Análisis de RAT que utiliza scripts AutoIt para evadir la detección antivirus
• 2017.11 [360] Powershell Empire evade AV para lograr control remoto
• 2017.10 [riskiq] New htpRAT Gives Complete Remote Control Capabilities to Chinese Threat Actors
• 2017.10 [lookout] JadeRAT mobile surveillanceware spikes in espionage activity
• 2017.10 [buguroo] RAT Protection for Banking Customers That Works
• 2017.10 [cylance] Cylance vs. Hacker’s Door Remote Access Trojan
• 2017.10 [malwarebytes] Un documento "normal" de Word descarga automáticamente un archivo RTF malicioso al iniciarse (aprovechando CVE-2017-8759), y luego dicho RTF descarga y ejecuta el payload final
• 2017.10 [rsa] Malspam Delivers HWorm RAT October, 2017
• 2017.09 [freebuf] Análisis y trazabilidad del troyano minero de control remoto "Bumblebee" (con respuesta del autor)
• 2017.09 [intezer] Análisis de variantes de Agent.BTZ/ComRAT
• 2017.09 [360] Análisis del RAT propagado mediante la vulnerabilidad "EternalBlue"
• 2017.09 [UltraHacks] SilentBytes RAT 1.6.3c | Multi Administration Tool!
• 2017.09 [freebuf] Mantis cazando a la cigarra, el secreto detrás de la distribución gratuita de la herramienta de control remoto Cobian
• 2017.09 [360] Cómo controlar de forma remota un ratón inalámbrico: revelando los secretos del secuestro de ratones
• 2017.09 [4hou] Práctica del complemento "phishing": mira cómo convierto el editor descuidado de un desarrollador en un control remoto automático
• 2017.09 [fortinet] Análisis del RAT rehecho utilizado en campañas APT contra organizaciones vietnamitas
• 2017.09 [TechnoHacker] Arcom RAT: Is It Worth $3000?
• 2017.08 [lookout] RAT de acceso remoto para Android xRAT
• 2017.08 [paloaltonetworks] Updated KHRAT Malware Used in Cambodi
• 2017.08 [JackkTutorials] How to make a HTTP RAT (#3)
• 2017.08 [freebuf] Troyano de acceso remoto realiza el truco divino de "uso legítimo": revelando la corriente oculta de robos detrás de las falsas herramientas de crack
• 2017.08 [4hou] Troyano de acceso remoto realiza el truco divino de "uso legítimo": revelando la corriente oculta de robos detrás de las falsas herramientas de crack
• 2017.08 [fortinet] A Quick Look at a New KONNI RAT Variant
• 2017.08 [freebuf] Cómo convertir Photoshop en una herramienta de control remoto (RAT) para explotar
• 2017.08 [n0where] Koadic C3 COM Command & Control – JScript RAT
• 2017.08 [cylance] Threat Spotlight: KONNI – A Stealthy Remote Access Trojan
• 2017.08 [cylance] Cylance vs. KONNI RAT
• 2017.08 [intezer] New Variants of Agent.BTZ/ComRAT Found: The Threat That Hit The Pentagon In 2008 Still Evolving; Part 1/2
• 2017.08 [rsa] Malspam delivers Xtreme RAT 8-1-2017
• 2017.07 [CodeColorist] How to turn Photoshop into a remote access tool
• 2017.07 [pentestmag] Stitch – a Python written cross platform RAT
• 2017.07 [freebuf] [BlackHat 2017] La versión internacional del Ninebot Segway Mini de Xiaomi tiene graves vulnerabilidades de seguridad que permiten control remoto
• 2017.07 [pentestingexperts] Hacking Android Smart Phone Using AhMyth Android RAT
• 2017.07 [JackkTutorials] How to make a HTTP RAT (#2)
• 2017.07 [ringzerolabs] Bladabindi RAT
• 2017.07 [krebsonsecurity] Who is the GovRAT Author and Mirai Botmaster ‘Bestbuy’?
• 2017.07 [JackkTutorials] How to make a HTTP RAT (#1)
• 2017.06 [freebuf] El gran maestro del "uso legítimo": nuevo troyano de acceso remoto realiza el arte del cambio de forma y sombra
• 2017.06 [pediy] [Original] Análisis del comportamiento de un troyano de acceso remoto
• 2017.06 [ColinHardy] JavaScript that drops a RAT - Reverse Engineer it like a pro
• 2017.06 [4hou] El gran maestro del "uso legítimo": nuevo troyano de acceso remoto realiza el arte del cambio de forma y sombra
• 2017.06 [360] El gran maestro del "uso legítimo": nuevo troyano de acceso remoto realiza el arte del cambio de forma y sombra
• 2017.06 [freebuf] Experimento con Metasploit: crear payload evasivo + control remoto de cualquier host "externo"
• 2017.06 [cylance] Cylance vs. FF-Rat Malware
• 2017.06 [cylance] Threat Spotlight: Breaking Down FF-Rat Malware
• 2017.06 [alienvault] Análisis de MacSpy, el primer MaaS (Malware como Servicio) en la plataforma Mac
• 2017.05 [TechnoHacker] How to check if you're infected with a RAT in 10 seconds
• 2017.05 [freebuf] VIP de los troyanos de acceso remoto: robo de cuentas de compras en línea para comprar tarjetas regalo virtuales
• 2017.05 [pediy] [Original] Análisis desde cero de un clásico troyano de acceso remoto infeccioso
• 2017.05 [4hou] VIP de los troyanos de acceso remoto: robo de cuentas de compras en línea para comprar tarjetas regalo virtuales
• 2017.05 [sec] VIP de los troyanos de acceso remoto: robo de cuentas de compras en línea para comprar tarjetas regalo virtuales
• 2017.05 [360] VIP de los troyanos de acceso remoto: robo de cuentas de compras en línea para comprar tarjetas regalo virtuales
• 2017.05 [aliyun] Backdoor de control remoto FlexiSpy para Android
• 2017.05 [UltraHacks] Imminent Monitor RAT setup & New update review 2017
• 2017.05 [TechnoHacker] How to spread your RAT
• 2017.05 [esecurityplanet] Shodan Partners with Recorded Future to Detect Botnets and RATs
• 2017.04 [alienvault] The Felismus RAT: Powerful Threat, Mysterious Purpose
• 2017.04 [4hou] Más de veinte routers Linksys presentan vulnerabilidades de seguridad, podrían ser controlados de forma remota
• 2017.04 [freebuf] Cuidado, el RAT de Android (spynote) se ha actualizado...
• 2017.04 [paloaltonetworks] Cardinal RAT Active for Over
• 2017.04 [jpcert] RedLeaves - Malware Based on Open Source RAT
• 2017.03 [TechnoHacker] What's the difference between http botnets and RATs?
• 2017.03 [paloaltonetworks] Trochilus and New MoonWind RATs Used In Attack Against Thai Orga
• 2017.03 [fireeye] WMImplant – A WMI Based Agentless Post-Exploitation RAT Developed in PowerShell
• 2017.03 [4hou] Secuelas del caso CIA: más de 300 tipos de switches Cisco gravemente afectados, un 0day puede controlarlos de forma remota
• 2017.03 [secist] Herramienta de administración remota (RAT) basada en Python – Stitch
• 2017.03 [trendmicro] Introducción a MajikPOS: combinación de malware PoS y RAT
• 2017.03 [4hou] Proton RAT utiliza vulnerabilidad 0day para actualizar nueva variante, vendida desde $1200
• 2017.02 [UltraHacks] SilentBytes RAT [beta] Windows 10 || PROMOTION ||
• 2017.02 [UltraHacks] SilentBytes RAT Linux Ubuntu || PROMOTION ||
• 2017.02 [UltraHacks] SilentBytes RAT 1.1 [BETA] Mac OS X || PROMOTION ||
• 2017.02 [lookout] ViperRAT: The mobile APT targeting the Israeli Defense Force that should be on your radar
• 2017.02 [talosintelligence] Go RAT, Go! AthenaGo points “TorWords” Portugal
• 2017.02 [netskope] Decoys, RATs, and the Cloud: The growing trend
• 2017.01 [malwarebytes] Mobile Menace Monday: AndroRAT Evolved
• 2017.01 [malwarebytes] From a fake wallet to a Java RAT
• 2016.12 [TechnoHacker] How to remotely execute a RAT on someone's PC
• 2016.12 [cyber] The Kings In Your Castle Part 4 – Packers, Crypters and a Pack of RATs
• 2016.11 [] Análisis de RAT en Linux
• 2016.11 [] Análisis de RAT en Linux
• 2016.11 [f] A RAT For The US Presidential Elections
• 2016.11 [fidelissecurity] Down the H-W0rm Hole with Houdini's RAT
• 2016.11 [4hou] RAT alojado en Pastebin puede causar pantalla azul del sistema
• 2016.10 [malwarebytes] Get your RAT on Pastebin
• 2016.10 [8090] Se descifra el bloqueo de huellas dactilares del Huawei P9, el enchufe de control remoto publica microblogs: la seguridad de los productos inteligentes es preocupante
• 2016.10 [sentinelone] GovRAT is Not New
• 2016.10 [UltraHacks] [$25] Imment Monitor RAT setup
• 2016.09 [securelist] TeamXRat: Brazilian cybercrime meets ransomware
• 2016.09 [freebuf] Troyano de acceso remoto para robo de cuentas se disfraza de 850Game
• 2016.09 [jimwilbur] DroidJack – A Quick Look at an Android RAT
• 2016.09 [360] Troyano de acceso remoto para robo de cuentas se disfraza de 850Game
• 2016.09 [countercept] Do you smell a rat?
• 2016.09 [countercept] Do you smell a rat?
• 2016.09 [freebuf] You dirty RAT: "el pez grande se come al chico" en el mundo criminal subterráneo
• 2016.08 [fortinet] German Speakers Targeted by SPAM Leading to Ozone RAT
• 2016.08 [freebuf] WeChat expone una grave vulnerabilidad de ejecución remota de código, puede ser controlado de forma remota
• 2016.08 [trustlook] Trustlook Discovers a Remote Administration Tool (RAT) Android Malware
• 2016.08 [id] XRat, Team, Corporacao
• 2016.08 [f] NanHaiShu: RATing the South China Sea
• 2016.07 [malwarenailed] Luminosity RAT - Re-purposed
• 2016.07 [360] Troyano de acceso remoto con apariencia legal: análisis profundo de Game564
• 2016.07 [fidelissecurity] Chasing Down RATs with Barncat
• 2016.07 [n0where] Python Remote Access Tool: Ares
• 2016.07 [360] H-WORM: un troyano de acceso remoto simple y activo
• 2016.06 [duo] Protecting Remote Access to Your Computer: RDP Attacks and Server Credentials for Sale
• 2016.06 [cybereason] Permission to Execute: The Incident of the Signed and Verified RAT
• 2016.06 [8090] Análisis de un troyano de acceso remoto JavaScript utilizado en ataques dirigidos
• 2016.06 [hackingarticles] HTTP RAT Tutorial for Beginners
• 2016.06 [avlsec] Falsificando aplicaciones conocidas para insertar módulos maliciosos: ¡el "lobo" con piel de oveja ha llegado! Alerta de troyano de control remoto WarThunder
• 2016.06 [cysinfo] Hunting APT RAT 9002 In Memory Using Volatility Plugin
• 2016.06 [f] Qarallax RAT: Spying On US Visa Applicants
• 2016.06 [qq] Troyano de acceso remoto explota vulnerabilidades en archivos del sistema de Windows para atacar
• 2016.06 [samvartaka] Dead RATs: Exploiting malware C2 servers
• 2016.05 [freebuf] En profundidad: el troyano de acceso remoto Poison Ivy comienza a asolar Myanmar y otros países asiáticos
• 2016.05 [trendmicro] Lost Door RAT: Accessible, Customizable Attack Tool
• 2016.04 [pentestpartners] RATing through the Steam Workshop
• 2016.04 [freebuf] Vulnerabilidad de control remoto en DameWare Mini Remote Control (CVE-2016-2345): juega con el control remoto
• 2016.04 [paloaltonetworks] New Poison Ivy RAT Variant Targets Hong Kong Pro-Democracy
• 2016.04 [sentinelone] Teaching an old RAT new tricks
• 2016.04 [itsjack] RAT Threat Intelligence – A Very Simple Manual Technique
• 2016.03 [TechnoHacker] How to port forward for any program and how to setup a DNS for RATs
• 2016.03 [malwarebytes] Latest Steam Malware Shows Signs of RAT Activity
• 2016.03 [freebuf] Cómo controlar de forma remota un ratón inalámbrico: revelando los secretos de mouseJack
• 2016.03 [malwarebytes] This Steam Scam is a Rat Race
• 2016.03 [itsjack] Imminent Monitor 4 RAT Analysis – Further Into The RAT
• 2016.02 [TechnoHacker] How to get rid of a RAT [Very in depth]
• 2016.02 [brindi] Advanced Techniques for Detecting RAT Screen Control
• 2016.02 [mindedsecurity] RAT WARS 2.0: Advanced Techniques for Detecting RAT Screen Control
• 2016.01 [fidelissecurity] Introducing Hi-Zor RAT
• 2016.01 [alienvault] Trochilus RAT: Invading your Sandbox
• 2016.01 [itsjack] Imminent Monitor 4 RAT Analysis – A Glance
• 2016.01 [freebuf] Informe de análisis del troyano de acceso remoto "Shadow Thief"
• 2016.01 [] Análisis de RAT en Linux
• 2016.01 [ensilo] Cyber-Security in 120 Secs: 0-days, and a new RAT targeting APJ
• 2016.01 [TechnoHacker] How to use all of Xtreme RAT's features
• 2016.01 [freebuf] Análisis de un RAT JSocket
• 2015.12 [paloaltonetworks] BBSRAT Attacks Targeting Russian Organizations Linked to Roam
• 2015.12 [welivesecurity] Europol makes 12 arrests in Remote Access Trojan crackdown
• 2015.11 [360] Investigación profunda sobre el verdadero culpable detrás del troyano de acceso remoto "Big Bad Wolf"
• 2015.11 [cylance] Cylance vs. GlassRAT
• 2015.11 [rsa] Detecting GlassRAT using Security Analytics and ECAT
• 2015.11 [freebuf] KillerRat: hacker egipcio desarrolla nuevo RAT para plataforma Windows
• 2015.11 [freebuf] Secuelas del evento de malware en el sitio BT Paradise: análisis del troyano de acceso remoto "Big Bad Wolf" e investigación del verdadero culpable
• 2015.11 [360] Análisis del troyano de acceso remoto "Big Bad Wolf" e investigación del verdadero culpable
• 2015.11 [freebuf] GovRAT, un arma popular en el mercado negro: plataforma de firma digital para malware
• 2015.11 [duo] Criminals Leverage Remote Access to Patient Data Applications

Read more